[Question] Enclave Process Interaction

[xxPhilipxx]

Hi, I love your work! :)

I have a question: I am trying to run 1Password in its own Enclave. When I try to start 1Password, it gets terminated, and in the Trace Log, I see that svchost.exe [Appinfo] gets blocked from using multiple permissions (like controlling execution, special permissions, etc.).

How can I allow svchost to do what it needs to do? (I already allowed svchost.exe in the Enclave).

I have attached my current 1Password enclave XML.

1Password.xml

[love-code-yeyixiao]

Only when svchost.exe is running in the enclave itself,it won't be isolated.

[xxPhilipxx]

But i have set svchost.exe to be allowed in the Enclave what should i do ?
Thanks for your help!

[love-code-yeyixiao]

Theoryly only two ways are available:

1. Enable "Debugging",which cuts down your isolation completely
2. Find ways to let svchost.exe run in your enclave(but I don't yet find the exact method)